@oscharko-dev/keiko-contracts 0.2.7 → 0.2.9

package/dist/git-delivery.d.ts

@@ -0,0 +1,202 @@
+export declare const GIT_DELIVERY_SCHEMA_VERSION: "1";
+export type GitDeliveryActionKind = "branch-create" | "branch-switch" | "stage" | "unstage" | "commit" | "push" | "pr-create" | "pr-update" | "merge" | "abort" | "recovery";
+export declare const GIT_DELIVERY_ACTION_KINDS: readonly GitDeliveryActionKind[];
+export type GitDeliveryRiskClass = "local-mutation" | "publish" | "protected-or-merge" | "recovery-or-rewrite";
+export declare const GIT_DELIVERY_RISK_CLASSES: readonly GitDeliveryRiskClass[];
+export declare const GIT_DELIVERY_RISK_CLASS_SEVERITY: Readonly<Record<GitDeliveryRiskClass, number>>;
+export declare const GIT_DELIVERY_ACTION_RISK_DEFAULTS: Readonly<Record<GitDeliveryActionKind, GitDeliveryRiskClass>>;
+export interface GitDeliveryBranchCreateInputs {
+    readonly kind: "branch-create";
+    readonly branchName: string;
+    readonly baseBranchName: string;
+    readonly startPointRefHash: string;
+}
+export interface GitDeliveryBranchSwitchInputs {
+    readonly kind: "branch-switch";
+    readonly branchName: string;
+}
+export interface GitDeliveryStageInputs {
+    readonly kind: "stage";
+    readonly pathCount: number;
+    readonly includesUntracked: boolean;
+}
+export interface GitDeliveryUnstageInputs {
+    readonly kind: "unstage";
+    readonly pathCount: number;
+}
+export interface GitDeliveryCommitInputs {
+    readonly kind: "commit";
+    readonly messageByteLength: number;
+    readonly stagedPathCount: number;
+    readonly allowEmptyCommit: boolean;
+}
+export interface GitDeliveryPushInputs {
+    readonly kind: "push";
+    readonly sourceBranchName: string;
+    readonly remoteAlias: string;
+    readonly remoteBranchName: string;
+    readonly forcePush: boolean;
+    readonly setUpstreamTracking: boolean;
+}
+export interface GitDeliveryPrCreateInputs {
+    readonly kind: "pr-create";
+    readonly headBranchName: string;
+    readonly baseBranchName: string;
+    readonly titleByteLength: number;
+    readonly bodyByteLength: number;
+    readonly isDraft: boolean;
+}
+export interface GitDeliveryPrUpdateInputs {
+    readonly kind: "pr-update";
+    readonly prExternalId: string;
+    readonly headBranchName: string;
+    readonly baseBranchName: string;
+    readonly titleByteLength: number;
+    readonly bodyByteLength: number;
+    readonly convertToDraft: boolean;
+    readonly convertFromDraft: boolean;
+}
+export type GitDeliveryMergeStrategyHint = "squash" | "rebase" | "merge-commit" | "provider-default";
+export declare const GIT_DELIVERY_MERGE_STRATEGY_HINTS: readonly GitDeliveryMergeStrategyHint[];
+export interface GitDeliveryMergeInputs {
+    readonly kind: "merge";
+    readonly prExternalId: string;
+    readonly mergeStrategyHint: GitDeliveryMergeStrategyHint;
+    readonly deleteBranchAfterMerge: boolean;
+}
+export type GitDeliveryAbortableOperation = "merge" | "rebase" | "cherry-pick" | "revert" | "bisect";
+export declare const GIT_DELIVERY_ABORTABLE_OPERATIONS: readonly GitDeliveryAbortableOperation[];
+export interface GitDeliveryAbortInputs {
+    readonly kind: "abort";
+    readonly operationToAbort: GitDeliveryAbortableOperation;
+    readonly preserveIndexChanges: boolean;
+}
+export type GitDeliveryRecoveryStrategyHint = "soft-reset" | "mixed-reset" | "stash-and-reset" | "restore-index";
+export declare const GIT_DELIVERY_RECOVERY_STRATEGY_HINTS: readonly GitDeliveryRecoveryStrategyHint[];
+export interface GitDeliveryRecoveryInputs {
+    readonly kind: "recovery";
+    readonly recoveryStrategyHint: GitDeliveryRecoveryStrategyHint;
+    readonly targetRefHash: string;
+    readonly affectedPathCount: number;
+}
+export type GitDeliveryResolvedInputs = GitDeliveryBranchCreateInputs | GitDeliveryBranchSwitchInputs | GitDeliveryStageInputs | GitDeliveryUnstageInputs | GitDeliveryCommitInputs | GitDeliveryPushInputs | GitDeliveryPrCreateInputs | GitDeliveryPrUpdateInputs | GitDeliveryMergeInputs | GitDeliveryAbortInputs | GitDeliveryRecoveryInputs;
+export interface GitDeliveryApprovalNotRequired {
+    readonly required: false;
+}
+export interface GitDeliveryApprovalGranted {
+    readonly required: true;
+    readonly approvalTokenHash: string;
+    readonly approvedByUserId: string;
+    readonly approvedAtMs: number;
+    readonly expiresAtMs?: number | undefined;
+}
+export type GitDeliveryApprovalRequirement = GitDeliveryApprovalNotRequired | GitDeliveryApprovalGranted;
+export type GitDeliveryProviderCapability = "branch-protection" | "draft-pr" | "required-checks" | "merge-queue" | "protected-branch-delete";
+export declare const GIT_DELIVERY_PROVIDER_CAPABILITIES: readonly GitDeliveryProviderCapability[];
+export type GitDeliveryBranchMatchKind = "exact" | "prefix";
+export declare const GIT_DELIVERY_BRANCH_MATCH_KINDS: readonly GitDeliveryBranchMatchKind[];
+export interface GitDeliveryBranchPattern {
+    readonly matchKind: GitDeliveryBranchMatchKind;
+    readonly value: string;
+}
+export interface GitDeliveryBranchPatternConstraint {
+    readonly kind: "branch-pattern";
+    readonly patterns: readonly GitDeliveryBranchPattern[];
+}
+export interface GitDeliveryProviderCapabilityConstraint {
+    readonly kind: "provider-capability";
+    readonly capability: GitDeliveryProviderCapability;
+}
+export interface GitDeliveryRiskClassCeilingConstraint {
+    readonly kind: "risk-class-ceiling";
+    readonly maxRiskClass: GitDeliveryRiskClass;
+}
+export type GitDeliveryConstraint = GitDeliveryBranchPatternConstraint | GitDeliveryProviderCapabilityConstraint | GitDeliveryRiskClassCeilingConstraint;
+export type GitDeliveryBlockReason = "policy-pack-blocked" | "protected-branch" | "provider-capability-absent" | "approval-expired" | "risk-class-ceiling" | "no-applicable-rule";
+export declare const GIT_DELIVERY_BLOCK_REASONS: readonly GitDeliveryBlockReason[];
+export type GitDeliveryMergeBlockReason = "checks-failing" | "approvals-missing" | "conflicts" | "branch-protection" | "merge-queue-position" | "provider-policy";
+export declare const GIT_DELIVERY_MERGE_BLOCK_REASONS: readonly GitDeliveryMergeBlockReason[];
+export type GitDeliveryPolicyDecision = {
+    readonly outcome: "allowed";
+} | {
+    readonly outcome: "blocked";
+    readonly reason: GitDeliveryBlockReason;
+} | {
+    readonly outcome: "approval-gated";
+    readonly requiredApprovers: readonly string[];
+} | {
+    readonly outcome: "constrained";
+    readonly constraints: readonly GitDeliveryConstraint[];
+};
+export interface GitDeliveryActionPreview {
+    readonly schemaVersion: typeof GIT_DELIVERY_SCHEMA_VERSION;
+    readonly affectedBranchName?: string | undefined;
+    readonly estimatedFileCount?: number | undefined;
+    readonly estimatedBytesDelta?: number | undefined;
+    readonly wouldCreateRemoteBranch: boolean;
+    readonly wouldTriggerChecks: boolean;
+}
+export type GitDeliveryExecutionOutcome = "succeeded" | "failed" | "aborted" | "partial";
+export declare const GIT_DELIVERY_EXECUTION_OUTCOMES: readonly GitDeliveryExecutionOutcome[];
+export type GitDeliveryExecutionErrorCode = "provider-rejected" | "network-failure" | "conflict" | "precondition-failed" | "timeout" | "internal-error";
+export declare const GIT_DELIVERY_EXECUTION_ERROR_CODES: readonly GitDeliveryExecutionErrorCode[];
+export interface GitDeliveryPartialDetail {
+    readonly attemptedUnitCount: number;
+    readonly succeededUnitCount: number;
+}
+export interface GitDeliveryExecutionResult {
+    readonly schemaVersion: typeof GIT_DELIVERY_SCHEMA_VERSION;
+    readonly outcome: GitDeliveryExecutionOutcome;
+    readonly durationMs: number;
+    readonly externalId?: string | undefined;
+    readonly errorCode?: GitDeliveryExecutionErrorCode | undefined;
+    readonly partialDetail?: GitDeliveryPartialDetail | undefined;
+}
+export interface GitDeliveryEvidenceRef {
+    readonly sourceGroundedRunId: string;
+    readonly evidenceManifestStableIdHash: string;
+}
+export interface GitDeliveryActionEnvelopeFor<I extends GitDeliveryResolvedInputs> {
+    readonly schemaVersion: typeof GIT_DELIVERY_SCHEMA_VERSION;
+    readonly actionId: string;
+    readonly kind: I["kind"];
+    readonly resolvedInputs: I;
+    readonly policyDecision: GitDeliveryPolicyDecision;
+    readonly approvalRequirement: GitDeliveryApprovalRequirement;
+    readonly preview?: GitDeliveryActionPreview | undefined;
+    readonly executionResult?: GitDeliveryExecutionResult | undefined;
+    readonly evidenceRef?: GitDeliveryEvidenceRef | undefined;
+}
+export type GitDeliveryActionEnvelope = GitDeliveryActionEnvelopeFor<GitDeliveryBranchCreateInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryBranchSwitchInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryStageInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryUnstageInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryCommitInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryPushInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryPrCreateInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryPrUpdateInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryMergeInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryAbortInputs> | GitDeliveryActionEnvelopeFor<GitDeliveryRecoveryInputs>;
+export type GitDeliveryParseResult<T> = {
+    readonly ok: true;
+    readonly value: T;
+} | {
+    readonly ok: false;
+    readonly errors: readonly string[];
+};
+export declare function isGitDeliveryActionKind(value: unknown): value is GitDeliveryActionKind;
+export declare function isGitDeliveryRiskClass(value: unknown): value is GitDeliveryRiskClass;
+export declare function isGitDeliveryProviderCapability(value: unknown): value is GitDeliveryProviderCapability;
+export declare function isGitDeliveryBranchMatchKind(value: unknown): value is GitDeliveryBranchMatchKind;
+export declare function isGitDeliveryBlockReason(value: unknown): value is GitDeliveryBlockReason;
+export declare function isGitDeliveryMergeBlockReason(value: unknown): value is GitDeliveryMergeBlockReason;
+export declare function isGitDeliveryMergeStrategyHint(value: unknown): value is GitDeliveryMergeStrategyHint;
+export declare function isGitDeliveryAbortableOperation(value: unknown): value is GitDeliveryAbortableOperation;
+export declare function isGitDeliveryRecoveryStrategyHint(value: unknown): value is GitDeliveryRecoveryStrategyHint;
+export declare function isGitDeliveryExecutionOutcome(value: unknown): value is GitDeliveryExecutionOutcome;
+export declare function isGitDeliveryExecutionErrorCode(value: unknown): value is GitDeliveryExecutionErrorCode;
+export declare function isGitDeliveryBranchPattern(value: unknown): value is GitDeliveryBranchPattern;
+export declare function isGitDeliveryConstraint(value: unknown): value is GitDeliveryConstraint;
+export declare function isGitDeliveryApprovalRequirement(value: unknown): value is GitDeliveryApprovalRequirement;
+export declare function isGitDeliveryPolicyDecision(value: unknown): value is GitDeliveryPolicyDecision;
+export declare function isGitDeliveryEvidenceRef(value: unknown): value is GitDeliveryEvidenceRef;
+export declare function isGitDeliveryExecutionResult(value: unknown): value is GitDeliveryExecutionResult;
+export declare function parseGitDeliveryResolvedInputs(value: unknown): GitDeliveryParseResult<GitDeliveryResolvedInputs>;
+export declare function parseGitDeliveryActionEnvelope(value: unknown): GitDeliveryParseResult<GitDeliveryActionEnvelope>;
+export declare function gitDeliveryDefaultRiskClass(kind: string): GitDeliveryRiskClass;
+export declare function gitDeliveryRiskClassForInputs(inputs: GitDeliveryResolvedInputs): GitDeliveryRiskClass;
+export declare function gitDeliveryRiskClassWithinCeiling(actionKind: GitDeliveryActionKind, ceiling: GitDeliveryRiskClass): boolean;
+export declare function gitDeliveryBranchNameMatchesPattern(branchName: string, pattern: GitDeliveryBranchPattern): boolean;
+export declare function gitDeliveryBranchNameMatchesAny(branchName: string, patterns: readonly GitDeliveryBranchPattern[]): boolean;
+//# sourceMappingURL=git-delivery.d.ts.map

package/dist/git-delivery.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-delivery.d.ts","sourceRoot":"","sources":["../src/git-delivery.ts"],"names":[],"mappings":"AAcA,eAAO,MAAM,2BAA2B,EAAG,GAAY,CAAC;AAIxD,MAAM,MAAM,qBAAqB,GAC7B,eAAe,GACf,eAAe,GACf,OAAO,GACP,SAAS,GACT,QAAQ,GACR,MAAM,GACN,WAAW,GACX,WAAW,GACX,OAAO,GACP,OAAO,GACP,UAAU,CAAC;AAEf,eAAO,MAAM,yBAAyB,EAAE,SAAS,qBAAqB,EAY5D,CAAC;AAMX,MAAM,MAAM,oBAAoB,GAC5B,gBAAgB,GAChB,SAAS,GACT,oBAAoB,GACpB,qBAAqB,CAAC;AAE1B,eAAO,MAAM,yBAAyB,EAAE,SAAS,oBAAoB,EAK3D,CAAC;AAGX,eAAO,MAAM,gCAAgC,EAAE,QAAQ,CAAC,MAAM,CAAC,oBAAoB,EAAE,MAAM,CAAC,CAKlF,CAAC;AAKX,eAAO,MAAM,iCAAiC,EAAE,QAAQ,CACtD,MAAM,CAAC,qBAAqB,EAAE,oBAAoB,CAAC,CAa3C,CAAC;AAMX,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAC5B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAID,MAAM,WAAW,6BAA6B;IAC5C,QAAQ,CAAC,IAAI,EAAE,eAAe,CAAC;IAC/B,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;CAC7B;AAED,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;IAC3B,QAAQ,CAAC,iBAAiB,EAAE,OAAO,CAAC;CACrC;AAED,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,IAAI,EAAE,SAAS,CAAC;IACzB,QAAQ,CAAC,SAAS,EAAE,MAAM,CAAC;CAC5B;AAED,MAAM,WAAW,uBAAuB;IACtC,QAAQ,CAAC,IAAI,EAAE,QAAQ,CAAC;IACxB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,WAAW,qBAAqB;IACpC,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,mBAAmB,EAAE,OAAO,CAAC;CACvC;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,OAAO,EAAE,OAAO,CAAC;CAC3B;AAED,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,WAAW,CAAC;IAC3B,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,eAAe,EAAE,MAAM,CAAC;IACjC,QAAQ,CAAC,cAAc,EAAE,MAAM,CAAC;IAChC,QAAQ,CAAC,cAAc,EAAE,OAAO,CAAC;IACjC,QAAQ,CAAC,gBAAgB,EAAE,OAAO,CAAC;CACpC;AAED,MAAM,MAAM,4BAA4B,GACpC,QAAQ,GACR,QAAQ,GACR,cAAc,GACd,kBAAkB,CAAC;AAEvB,eAAO,MAAM,iCAAiC,EAAE,SAAS,4BAA4B,EAK3E,CAAC;AAEX,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,iBAAiB,EAAE,4BAA4B,CAAC;IACzD,QAAQ,CAAC,sBAAsB,EAAE,OAAO,CAAC;CAC1C;AAED,MAAM,MAAM,6BAA6B,GACrC,OAAO,GACP,QAAQ,GACR,aAAa,GACb,QAAQ,GACR,QAAQ,CAAC;AAEb,eAAO,MAAM,iCAAiC,EAAE,SAAS,6BAA6B,EAM5E,CAAC;AAEX,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,IAAI,EAAE,OAAO,CAAC;IACvB,QAAQ,CAAC,gBAAgB,EAAE,6BAA6B,CAAC;IACzD,QAAQ,CAAC,oBAAoB,EAAE,OAAO,CAAC;CACxC;AAED,MAAM,MAAM,+BAA+B,GACvC,YAAY,GACZ,aAAa,GACb,iBAAiB,GACjB,eAAe,CAAC;AAEpB,eAAO,MAAM,oCAAoC,EAAE,SAAS,+BAA+B,EAKjF,CAAC;AAIX,MAAM,WAAW,yBAAyB;IACxC,QAAQ,CAAC,IAAI,EAAE,UAAU,CAAC;IAC1B,QAAQ,CAAC,oBAAoB,EAAE,+BAA+B,CAAC;IAC/D,QAAQ,CAAC,aAAa,EAAE,MAAM,CAAC;IAC/B,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;CACpC;AAGD,MAAM,MAAM,yBAAyB,GACjC,6BAA6B,GAC7B,6BAA6B,GAC7B,sBAAsB,GACtB,wBAAwB,GACxB,uBAAuB,GACvB,qBAAqB,GACrB,yBAAyB,GACzB,yBAAyB,GACzB,sBAAsB,GACtB,sBAAsB,GACtB,yBAAyB,CAAC;AAK9B,MAAM,WAAW,8BAA8B;IAC7C,QAAQ,CAAC,QAAQ,EAAE,KAAK,CAAC;CAC1B;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,QAAQ,EAAE,IAAI,CAAC;IAExB,QAAQ,CAAC,iBAAiB,EAAE,MAAM,CAAC;IACnC,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;IAClC,QAAQ,CAAC,YAAY,EAAE,MAAM,CAAC;IAC9B,QAAQ,CAAC,WAAW,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;CAC3C;AAED,MAAM,MAAM,8BAA8B,GACtC,8BAA8B,GAC9B,0BAA0B,CAAC;AAM/B,MAAM,MAAM,6BAA6B,GACrC,mBAAmB,GACnB,UAAU,GACV,iBAAiB,GACjB,aAAa,GACb,yBAAyB,CAAC;AAE9B,eAAO,MAAM,kCAAkC,EAAE,SAAS,6BAA6B,EAM7E,CAAC;AAMX,MAAM,MAAM,0BAA0B,GAAG,OAAO,GAAG,QAAQ,CAAC;AAE5D,eAAO,MAAM,+BAA+B,EAAE,SAAS,0BAA0B,EAGvE,CAAC;AAEX,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,SAAS,EAAE,0BAA0B,CAAC;IAC/C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;CACxB;AAED,MAAM,WAAW,kCAAkC;IACjD,QAAQ,CAAC,IAAI,EAAE,gBAAgB,CAAC;IAChC,QAAQ,CAAC,QAAQ,EAAE,SAAS,wBAAwB,EAAE,CAAC;CACxD;AAED,MAAM,WAAW,uCAAuC;IACtD,QAAQ,CAAC,IAAI,EAAE,qBAAqB,CAAC;IACrC,QAAQ,CAAC,UAAU,EAAE,6BAA6B,CAAC;CACpD;AAID,MAAM,WAAW,qCAAqC;IACpD,QAAQ,CAAC,IAAI,EAAE,oBAAoB,CAAC;IACpC,QAAQ,CAAC,YAAY,EAAE,oBAAoB,CAAC;CAC7C;AAED,MAAM,MAAM,qBAAqB,GAC7B,kCAAkC,GAClC,uCAAuC,GACvC,qCAAqC,CAAC;AAI1C,MAAM,MAAM,sBAAsB,GAC9B,qBAAqB,GACrB,kBAAkB,GAClB,4BAA4B,GAC5B,kBAAkB,GAClB,oBAAoB,GACpB,oBAAoB,CAAC;AAEzB,eAAO,MAAM,0BAA0B,EAAE,SAAS,sBAAsB,EAO9D,CAAC;AAEX,MAAM,MAAM,2BAA2B,GACnC,gBAAgB,GAChB,mBAAmB,GACnB,WAAW,GACX,mBAAmB,GACnB,sBAAsB,GACtB,iBAAiB,CAAC;AAEtB,eAAO,MAAM,gCAAgC,EAAE,SAAS,2BAA2B,EAOzE,CAAC;AAEX,MAAM,MAAM,yBAAyB,GACjC;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAA;CAAE,GAC/B;IAAE,QAAQ,CAAC,OAAO,EAAE,SAAS,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,sBAAsB,CAAA;CAAE,GACxE;IAAE,QAAQ,CAAC,OAAO,EAAE,gBAAgB,CAAC;IAAC,QAAQ,CAAC,iBAAiB,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,GACrF;IAAE,QAAQ,CAAC,OAAO,EAAE,aAAa,CAAC;IAAC,QAAQ,CAAC,WAAW,EAAE,SAAS,qBAAqB,EAAE,CAAA;CAAE,CAAC;AAMhG,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,aAAa,EAAE,OAAO,2BAA2B,CAAC;IAC3D,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,kBAAkB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACjD,QAAQ,CAAC,mBAAmB,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAClD,QAAQ,CAAC,uBAAuB,EAAE,OAAO,CAAC;IAC1C,QAAQ,CAAC,kBAAkB,EAAE,OAAO,CAAC;CACtC;AAED,MAAM,MAAM,2BAA2B,GAAG,WAAW,GAAG,QAAQ,GAAG,SAAS,GAAG,SAAS,CAAC;AAEzF,eAAO,MAAM,+BAA+B,EAAE,SAAS,2BAA2B,EAKxE,CAAC;AAEX,MAAM,MAAM,6BAA6B,GACrC,mBAAmB,GACnB,iBAAiB,GACjB,UAAU,GACV,qBAAqB,GACrB,SAAS,GACT,gBAAgB,CAAC;AAErB,eAAO,MAAM,kCAAkC,EAAE,SAAS,6BAA6B,EAO7E,CAAC;AAEX,MAAM,WAAW,wBAAwB;IACvC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;IACpC,QAAQ,CAAC,kBAAkB,EAAE,MAAM,CAAC;CACrC;AAED,MAAM,WAAW,0BAA0B;IACzC,QAAQ,CAAC,aAAa,EAAE,OAAO,2BAA2B,CAAC;IAC3D,QAAQ,CAAC,OAAO,EAAE,2BAA2B,CAAC;IAC9C,QAAQ,CAAC,UAAU,EAAE,MAAM,CAAC;IAE5B,QAAQ,CAAC,UAAU,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACzC,QAAQ,CAAC,SAAS,CAAC,EAAE,6BAA6B,GAAG,SAAS,CAAC;IAC/D,QAAQ,CAAC,aAAa,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;CAC/D;AAID,MAAM,WAAW,sBAAsB;IACrC,QAAQ,CAAC,mBAAmB,EAAE,MAAM,CAAC;IACrC,QAAQ,CAAC,4BAA4B,EAAE,MAAM,CAAC;CAC/C;AAOD,MAAM,WAAW,4BAA4B,CAAC,CAAC,SAAS,yBAAyB;IAC/E,QAAQ,CAAC,aAAa,EAAE,OAAO,2BAA2B,CAAC;IAC3D,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,IAAI,EAAE,CAAC,CAAC,MAAM,CAAC,CAAC;IACzB,QAAQ,CAAC,cAAc,EAAE,CAAC,CAAC;IAC3B,QAAQ,CAAC,cAAc,EAAE,yBAAyB,CAAC;IACnD,QAAQ,CAAC,mBAAmB,EAAE,8BAA8B,CAAC;IAC7D,QAAQ,CAAC,OAAO,CAAC,EAAE,wBAAwB,GAAG,SAAS,CAAC;IACxD,QAAQ,CAAC,eAAe,CAAC,EAAE,0BAA0B,GAAG,SAAS,CAAC;IAClE,QAAQ,CAAC,WAAW,CAAC,EAAE,sBAAsB,GAAG,SAAS,CAAC;CAC3D;AAED,MAAM,MAAM,yBAAyB,GACjC,4BAA4B,CAAC,6BAA6B,CAAC,GAC3D,4BAA4B,CAAC,6BAA6B,CAAC,GAC3D,4BAA4B,CAAC,sBAAsB,CAAC,GACpD,4BAA4B,CAAC,wBAAwB,CAAC,GACtD,4BAA4B,CAAC,uBAAuB,CAAC,GACrD,4BAA4B,CAAC,qBAAqB,CAAC,GACnD,4BAA4B,CAAC,yBAAyB,CAAC,GACvD,4BAA4B,CAAC,yBAAyB,CAAC,GACvD,4BAA4B,CAAC,sBAAsB,CAAC,GACpD,4BAA4B,CAAC,sBAAsB,CAAC,GACpD,4BAA4B,CAAC,yBAAyB,CAAC,CAAC;AAK5D,MAAM,MAAM,sBAAsB,CAAC,CAAC,IAChC;IAAE,QAAQ,CAAC,EAAE,EAAE,IAAI,CAAC;IAAC,QAAQ,CAAC,KAAK,EAAE,CAAC,CAAA;CAAE,GACxC;IAAE,QAAQ,CAAC,EAAE,EAAE,KAAK,CAAC;IAAC,QAAQ,CAAC,MAAM,EAAE,SAAS,MAAM,EAAE,CAAA;CAAE,CAAC;AAkC/D,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CAEtF;AAED,wBAAgB,sBAAsB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,oBAAoB,CAEpF;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,6BAA6B,CAIxC;AAED,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,0BAA0B,CAEhG;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAExF;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,2BAA2B,CAEtC;AAED,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,4BAA4B,CAIvC;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,6BAA6B,CAIxC;AAED,wBAAgB,iCAAiC,CAC/C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,+BAA+B,CAI1C;AAED,wBAAgB,6BAA6B,CAC3C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,2BAA2B,CAEtC;AAED,wBAAgB,+BAA+B,CAC7C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,6BAA6B,CAIxC;AAED,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,wBAAwB,CAM5F;AAED,wBAAgB,uBAAuB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,qBAAqB,CActF;AAaD,wBAAgB,gCAAgC,CAC9C,KAAK,EAAE,OAAO,GACb,KAAK,IAAI,8BAA8B,CAQzC;AAED,wBAAgB,2BAA2B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,yBAAyB,CAiB9F;AAED,wBAAgB,wBAAwB,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,sBAAsB,CAMxF;AAUD,wBAAgB,4BAA4B,CAAC,KAAK,EAAE,OAAO,GAAG,KAAK,IAAI,0BAA0B,CAUhG;AAoHD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,sBAAsB,CAAC,yBAAyB,CAAC,CAYnD;AA4BD,wBAAgB,8BAA8B,CAC5C,KAAK,EAAE,OAAO,GACb,sBAAsB,CAAC,yBAAyB,CAAC,CAgBnD;AAKD,wBAAgB,2BAA2B,CAAC,IAAI,EAAE,MAAM,GAAG,oBAAoB,CAK9E;AAID,wBAAgB,6BAA6B,CAC3C,MAAM,EAAE,yBAAyB,GAChC,oBAAoB,CAKtB;AAGD,wBAAgB,iCAAiC,CAC/C,UAAU,EAAE,qBAAqB,EACjC,OAAO,EAAE,oBAAoB,GAC5B,OAAO,CAGT;AAID,wBAAgB,mCAAmC,CACjD,UAAU,EAAE,MAAM,EAClB,OAAO,EAAE,wBAAwB,GAChC,OAAO,CAKT;AAED,wBAAgB,+BAA+B,CAC7C,UAAU,EAAE,MAAM,EAClB,QAAQ,EAAE,SAAS,wBAAwB,EAAE,GAC5C,OAAO,CAET"}

package/dist/git-delivery.js

@@ -0,0 +1,410 @@
+// Public type contracts for the governed Git delivery surface (Issue #471, Epic #470).
+// Ownership: git-delivery domain. Disjoint from workflow-handoff.ts (one-shot agent invocation)
+// and editor-agent.ts (editor bridge). Leaf-package rules (ADR-0019): pure types and frozen
+// const tables only. No IO, no clock, no crypto, no randomness. Opaque hex hashes are produced
+// by callers (sha256Hex in stableId.ts or equivalent). Relative imports end in ".js".
+//
+// This is the CORE atom module for the git-delivery surface. It imports NOTHING from its two
+// siblings (git-delivery-policy.ts / git-delivery-provider.ts). The siblings import FROM here, so
+// the dependency graph is a one-directional DAG with no cycles (verified by arch:check). The only
+// internal import is `./workflow-handoff.js` for `isApprovalTokenShape` (a legal intra-package
+// relative import; keiko-contracts modules may reference each other).
+import { isApprovalTokenShape } from "./workflow-handoff.js";
+export const GIT_DELIVERY_SCHEMA_VERSION = "1";
+export const GIT_DELIVERY_ACTION_KINDS = [
+    "branch-create",
+    "branch-switch",
+    "stage",
+    "unstage",
+    "commit",
+    "push",
+    "pr-create",
+    "pr-update",
+    "merge",
+    "abort",
+    "recovery",
+];
+export const GIT_DELIVERY_RISK_CLASSES = [
+    "local-mutation",
+    "publish",
+    "protected-or-merge",
+    "recovery-or-rewrite",
+];
+// Ordinal severity. Higher ordinal = higher risk. Never compare ordinals by action name string.
+export const GIT_DELIVERY_RISK_CLASS_SEVERITY = {
+    "local-mutation": 1,
+    publish: 2,
+    "protected-or-merge": 3,
+    "recovery-or-rewrite": 4,
+};
+// Default risk class per action kind. Keys are ordered to match GIT_DELIVERY_ACTION_KINDS exactly.
+// Unknown kinds (post-deserialization) default to the highest class via gitDeliveryDefaultRiskClass
+// — this table covers all known kinds exactly.
+export const GIT_DELIVERY_ACTION_RISK_DEFAULTS = {
+    "branch-create": "local-mutation",
+    "branch-switch": "local-mutation",
+    stage: "local-mutation",
+    unstage: "local-mutation",
+    commit: "local-mutation",
+    push: "publish",
+    "pr-create": "protected-or-merge",
+    "pr-update": "protected-or-merge",
+    merge: "protected-or-merge",
+    abort: "local-mutation",
+    recovery: "recovery-or-rewrite",
+};
+export const GIT_DELIVERY_MERGE_STRATEGY_HINTS = [
+    "squash",
+    "rebase",
+    "merge-commit",
+    "provider-default",
+];
+export const GIT_DELIVERY_ABORTABLE_OPERATIONS = [
+    "merge",
+    "rebase",
+    "cherry-pick",
+    "revert",
+    "bisect",
+];
+export const GIT_DELIVERY_RECOVERY_STRATEGY_HINTS = [
+    "soft-reset",
+    "mixed-reset",
+    "stash-and-reset",
+    "restore-index",
+];
+export const GIT_DELIVERY_PROVIDER_CAPABILITIES = [
+    "branch-protection",
+    "draft-pr",
+    "required-checks",
+    "merge-queue",
+    "protected-branch-delete",
+];
+export const GIT_DELIVERY_BRANCH_MATCH_KINDS = [
+    "exact",
+    "prefix",
+];
+export const GIT_DELIVERY_BLOCK_REASONS = [
+    "policy-pack-blocked",
+    "protected-branch",
+    "provider-capability-absent",
+    "approval-expired",
+    "risk-class-ceiling",
+    "no-applicable-rule",
+];
+export const GIT_DELIVERY_MERGE_BLOCK_REASONS = [
+    "checks-failing",
+    "approvals-missing",
+    "conflicts",
+    "branch-protection",
+    "merge-queue-position",
+    "provider-policy",
+];
+export const GIT_DELIVERY_EXECUTION_OUTCOMES = [
+    "succeeded",
+    "failed",
+    "aborted",
+    "partial",
+];
+export const GIT_DELIVERY_EXECUTION_ERROR_CODES = [
+    "provider-rejected",
+    "network-failure",
+    "conflict",
+    "precondition-failed",
+    "timeout",
+    "internal-error",
+];
+// ─── Private predicate helpers ───────────────────────────────────────────────────
+function isRecord(value) {
+    return typeof value === "object" && value !== null && !Array.isArray(value);
+}
+function isString(value) {
+    return typeof value === "string";
+}
+function isNonEmptyString(value) {
+    return typeof value === "string" && value.length > 0;
+}
+function isNonNegativeInteger(value) {
+    return typeof value === "number" && Number.isInteger(value) && value >= 0;
+}
+function isBoolean(value) {
+    return typeof value === "boolean";
+}
+function isStringArray(value) {
+    return Array.isArray(value) && value.every(isString);
+}
+function isUndefinedOr(check) {
+    return (v) => v === undefined || check(v);
+}
+// ─── Exported guards ─────────────────────────────────────────────────────────────
+export function isGitDeliveryActionKind(value) {
+    return isString(value) && GIT_DELIVERY_ACTION_KINDS.includes(value);
+}
+export function isGitDeliveryRiskClass(value) {
+    return isString(value) && GIT_DELIVERY_RISK_CLASSES.includes(value);
+}
+export function isGitDeliveryProviderCapability(value) {
+    return (isString(value) && GIT_DELIVERY_PROVIDER_CAPABILITIES.includes(value));
+}
+export function isGitDeliveryBranchMatchKind(value) {
+    return isString(value) && GIT_DELIVERY_BRANCH_MATCH_KINDS.includes(value);
+}
+export function isGitDeliveryBlockReason(value) {
+    return isString(value) && GIT_DELIVERY_BLOCK_REASONS.includes(value);
+}
+export function isGitDeliveryMergeBlockReason(value) {
+    return isString(value) && GIT_DELIVERY_MERGE_BLOCK_REASONS.includes(value);
+}
+export function isGitDeliveryMergeStrategyHint(value) {
+    return (isString(value) && GIT_DELIVERY_MERGE_STRATEGY_HINTS.includes(value));
+}
+export function isGitDeliveryAbortableOperation(value) {
+    return (isString(value) && GIT_DELIVERY_ABORTABLE_OPERATIONS.includes(value));
+}
+export function isGitDeliveryRecoveryStrategyHint(value) {
+    return (isString(value) && GIT_DELIVERY_RECOVERY_STRATEGY_HINTS.includes(value));
+}
+export function isGitDeliveryExecutionOutcome(value) {
+    return isString(value) && GIT_DELIVERY_EXECUTION_OUTCOMES.includes(value);
+}
+export function isGitDeliveryExecutionErrorCode(value) {
+    return (isString(value) && GIT_DELIVERY_EXECUTION_ERROR_CODES.includes(value));
+}
+export function isGitDeliveryBranchPattern(value) {
+    return (isRecord(value) &&
+        isGitDeliveryBranchMatchKind(value.matchKind) &&
+        isNonEmptyString(value.value));
+}
+export function isGitDeliveryConstraint(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    if (value.kind === "branch-pattern") {
+        return Array.isArray(value.patterns) && value.patterns.every(isGitDeliveryBranchPattern);
+    }
+    if (value.kind === "provider-capability") {
+        return isGitDeliveryProviderCapability(value.capability);
+    }
+    if (value.kind === "risk-class-ceiling") {
+        return isGitDeliveryRiskClass(value.maxRiskClass);
+    }
+    return false;
+}
+function isApprovalGranted(value) {
+    return (value.required === true &&
+        isString(value.approvalTokenHash) &&
+        isApprovalTokenShape(value.approvalTokenHash) &&
+        isNonEmptyString(value.approvedByUserId) &&
+        isNonNegativeInteger(value.approvedAtMs) &&
+        isUndefinedOr(isNonNegativeInteger)(value.expiresAtMs));
+}
+export function isGitDeliveryApprovalRequirement(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    if (value.required === false) {
+        return true;
+    }
+    return isApprovalGranted(value);
+}
+export function isGitDeliveryPolicyDecision(value) {
+    if (!isRecord(value)) {
+        return false;
+    }
+    if (value.outcome === "allowed") {
+        return true;
+    }
+    if (value.outcome === "blocked") {
+        return isGitDeliveryBlockReason(value.reason);
+    }
+    if (value.outcome === "approval-gated") {
+        return isStringArray(value.requiredApprovers);
+    }
+    if (value.outcome === "constrained") {
+        return Array.isArray(value.constraints) && value.constraints.every(isGitDeliveryConstraint);
+    }
+    return false;
+}
+export function isGitDeliveryEvidenceRef(value) {
+    return (isRecord(value) &&
+        isNonEmptyString(value.sourceGroundedRunId) &&
+        isNonEmptyString(value.evidenceManifestStableIdHash));
+}
+function isPartialDetail(value) {
+    return (isRecord(value) &&
+        isNonNegativeInteger(value.attemptedUnitCount) &&
+        isNonNegativeInteger(value.succeededUnitCount));
+}
+export function isGitDeliveryExecutionResult(value) {
+    return (isRecord(value) &&
+        value.schemaVersion === GIT_DELIVERY_SCHEMA_VERSION &&
+        isGitDeliveryExecutionOutcome(value.outcome) &&
+        isNonNegativeInteger(value.durationMs) &&
+        isUndefinedOr(isNonEmptyString)(value.externalId) &&
+        isUndefinedOr(isGitDeliveryExecutionErrorCode)(value.errorCode) &&
+        isUndefinedOr(isPartialDetail)(value.partialDetail));
+}
+function isActionPreview(value) {
+    return (isRecord(value) &&
+        value.schemaVersion === GIT_DELIVERY_SCHEMA_VERSION &&
+        isUndefinedOr(isNonEmptyString)(value.affectedBranchName) &&
+        isUndefinedOr(isNonNegativeInteger)(value.estimatedFileCount) &&
+        isUndefinedOr(isNonNegativeInteger)(value.estimatedBytesDelta) &&
+        isBoolean(value.wouldCreateRemoteBranch) &&
+        isBoolean(value.wouldTriggerChecks));
+}
+// ─── Per-kind resolved-input guards (one per kind for the dispatch lookup) ────────
+function isBranchCreateInputs(value) {
+    return (isNonEmptyString(value.branchName) &&
+        isNonEmptyString(value.baseBranchName) &&
+        isNonEmptyString(value.startPointRefHash));
+}
+function isBranchSwitchInputs(value) {
+    return isNonEmptyString(value.branchName);
+}
+function isStageInputs(value) {
+    return isNonNegativeInteger(value.pathCount) && isBoolean(value.includesUntracked);
+}
+function isUnstageInputs(value) {
+    return isNonNegativeInteger(value.pathCount);
+}
+function isCommitInputs(value) {
+    return (isNonNegativeInteger(value.messageByteLength) &&
+        isNonNegativeInteger(value.stagedPathCount) &&
+        isBoolean(value.allowEmptyCommit));
+}
+function isPushInputs(value) {
+    return (isNonEmptyString(value.sourceBranchName) &&
+        isNonEmptyString(value.remoteAlias) &&
+        isNonEmptyString(value.remoteBranchName) &&
+        isBoolean(value.forcePush) &&
+        isBoolean(value.setUpstreamTracking));
+}
+function isPrCreateInputs(value) {
+    return (isNonEmptyString(value.headBranchName) &&
+        isNonEmptyString(value.baseBranchName) &&
+        isNonNegativeInteger(value.titleByteLength) &&
+        isNonNegativeInteger(value.bodyByteLength) &&
+        isBoolean(value.isDraft));
+}
+function isPrUpdateInputs(value) {
+    return (isNonEmptyString(value.prExternalId) &&
+        isNonEmptyString(value.headBranchName) &&
+        isNonEmptyString(value.baseBranchName) &&
+        isNonNegativeInteger(value.titleByteLength) &&
+        isNonNegativeInteger(value.bodyByteLength) &&
+        isBoolean(value.convertToDraft) &&
+        isBoolean(value.convertFromDraft));
+}
+function isMergeInputs(value) {
+    return (isNonEmptyString(value.prExternalId) &&
+        isGitDeliveryMergeStrategyHint(value.mergeStrategyHint) &&
+        isBoolean(value.deleteBranchAfterMerge));
+}
+function isAbortInputs(value) {
+    return (isGitDeliveryAbortableOperation(value.operationToAbort) && isBoolean(value.preserveIndexChanges));
+}
+function isRecoveryInputs(value) {
+    return (isGitDeliveryRecoveryStrategyHint(value.recoveryStrategyHint) &&
+        isNonEmptyString(value.targetRefHash) &&
+        isNonNegativeInteger(value.affectedPathCount));
+}
+const RESOLVED_INPUT_GUARDS = {
+    "branch-create": isBranchCreateInputs,
+    "branch-switch": isBranchSwitchInputs,
+    stage: isStageInputs,
+    unstage: isUnstageInputs,
+    commit: isCommitInputs,
+    push: isPushInputs,
+    "pr-create": isPrCreateInputs,
+    "pr-update": isPrUpdateInputs,
+    merge: isMergeInputs,
+    abort: isAbortInputs,
+    recovery: isRecoveryInputs,
+};
+// ─── Parsers ─────────────────────────────────────────────────────────────────────
+export function parseGitDeliveryResolvedInputs(value) {
+    if (!isRecord(value)) {
+        return { ok: false, errors: ["resolvedInputs must be an object"] };
+    }
+    if (!isGitDeliveryActionKind(value.kind)) {
+        return { ok: false, errors: ["resolvedInputs.kind must be a known GitDeliveryActionKind"] };
+    }
+    const guard = RESOLVED_INPUT_GUARDS[value.kind];
+    if (!guard(value)) {
+        return { ok: false, errors: [`resolvedInputs for kind "${value.kind}" has invalid fields`] };
+    }
+    return { ok: true, value: value };
+}
+function envelopeFieldErrors(value) {
+    const errors = [];
+    if (value.schemaVersion !== GIT_DELIVERY_SCHEMA_VERSION) {
+        errors.push("envelope.schemaVersion must equal the GIT_DELIVERY_SCHEMA_VERSION literal");
+    }
+    if (!isNonEmptyString(value.actionId)) {
+        errors.push("envelope.actionId must be a non-empty string");
+    }
+    if (!isGitDeliveryPolicyDecision(value.policyDecision)) {
+        errors.push("envelope.policyDecision is not a valid GitDeliveryPolicyDecision");
+    }
+    if (!isGitDeliveryApprovalRequirement(value.approvalRequirement)) {
+        errors.push("envelope.approvalRequirement is not a valid GitDeliveryApprovalRequirement");
+    }
+    if (!isUndefinedOr(isActionPreview)(value.preview)) {
+        errors.push("envelope.preview is not a valid GitDeliveryActionPreview");
+    }
+    if (!isUndefinedOr(isGitDeliveryExecutionResult)(value.executionResult)) {
+        errors.push("envelope.executionResult is not a valid GitDeliveryExecutionResult");
+    }
+    if (!isUndefinedOr(isGitDeliveryEvidenceRef)(value.evidenceRef)) {
+        errors.push("envelope.evidenceRef is not a valid GitDeliveryEvidenceRef");
+    }
+    return errors;
+}
+export function parseGitDeliveryActionEnvelope(value) {
+    if (!isRecord(value)) {
+        return { ok: false, errors: ["envelope must be an object"] };
+    }
+    const inputs = parseGitDeliveryResolvedInputs(value.resolvedInputs);
+    if (!inputs.ok) {
+        return { ok: false, errors: inputs.errors };
+    }
+    if (value.kind !== inputs.value.kind) {
+        return { ok: false, errors: ["envelope.kind must equal envelope.resolvedInputs.kind"] };
+    }
+    const fieldErrors = envelopeFieldErrors(value);
+    if (fieldErrors.length > 0) {
+        return { ok: false, errors: fieldErrors };
+    }
+    return { ok: true, value: value };
+}
+// ─── Risk-class lookups ──────────────────────────────────────────────────────────
+// Fail-closed risk lookup: unknown kinds → "recovery-or-rewrite" (ordinal 4).
+export function gitDeliveryDefaultRiskClass(kind) {
+    if (isGitDeliveryActionKind(kind)) {
+        return GIT_DELIVERY_ACTION_RISK_DEFAULTS[kind];
+    }
+    return "recovery-or-rewrite";
+}
+// Inputs-aware classifier: a force-push escalates beyond the default "publish" class so it is never
+// under-classified relative to its true blast radius.
+export function gitDeliveryRiskClassForInputs(inputs) {
+    if (inputs.kind === "push" && inputs.forcePush) {
+        return "recovery-or-rewrite";
+    }
+    return gitDeliveryDefaultRiskClass(inputs.kind);
+}
+// True when the action kind's default risk severity is at or below the ceiling severity.
+export function gitDeliveryRiskClassWithinCeiling(actionKind, ceiling) {
+    const actionSeverity = GIT_DELIVERY_RISK_CLASS_SEVERITY[gitDeliveryDefaultRiskClass(actionKind)];
+    return actionSeverity <= GIT_DELIVERY_RISK_CLASS_SEVERITY[ceiling];
+}
+// ─── Branch matchers ─────────────────────────────────────────────────────────────
+export function gitDeliveryBranchNameMatchesPattern(branchName, pattern) {
+    if (pattern.matchKind === "exact") {
+        return branchName === pattern.value;
+    }
+    return branchName.startsWith(pattern.value);
+}
+export function gitDeliveryBranchNameMatchesAny(branchName, patterns) {
+    return patterns.some((pattern) => gitDeliveryBranchNameMatchesPattern(branchName, pattern));
+}

package/dist/git-history.d.ts

@@ -0,0 +1,27 @@
+import type { GitRepositoryState, GitUnavailableReason, GitRepositoryValidation } from "./git-repository.js";
+export declare const GIT_HISTORY_SCHEMA_VERSION: "1";
+export interface GitHistoryEntry {
+    readonly sha: string;
+    readonly shortSha: string;
+    readonly subject: string;
+    readonly author: string;
+    readonly date: string;
+    readonly refs: readonly string[];
+    readonly parentCount: number;
+    readonly changedFileCount: number;
+}
+export interface GitHistoryResponse {
+    readonly schemaVersion: typeof GIT_HISTORY_SCHEMA_VERSION;
+    readonly root: string;
+    readonly repositoryRoot?: string | undefined;
+    readonly state: GitRepositoryState;
+    readonly available: boolean;
+    readonly reason?: GitUnavailableReason | "unsafe-repository" | "git-error" | undefined;
+    readonly message?: string | undefined;
+    readonly entries: readonly GitHistoryEntry[];
+    readonly limit: number;
+    readonly skip: number;
+    readonly truncated: boolean;
+}
+export declare function validateGitHistoryResponse(input: unknown): GitRepositoryValidation;
+//# sourceMappingURL=git-history.d.ts.map

package/dist/git-history.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"git-history.d.ts","sourceRoot":"","sources":["../src/git-history.ts"],"names":[],"mappings":"AAIA,OAAO,KAAK,EACV,kBAAkB,EAClB,oBAAoB,EACpB,uBAAuB,EACxB,MAAM,qBAAqB,CAAC;AAG7B,eAAO,MAAM,0BAA0B,EAAG,GAAY,CAAC;AAEvD,MAAM,WAAW,eAAe;IAC9B,QAAQ,CAAC,GAAG,EAAE,MAAM,CAAC;IACrB,QAAQ,CAAC,QAAQ,EAAE,MAAM,CAAC;IAC1B,QAAQ,CAAC,OAAO,EAAE,MAAM,CAAC;IACzB,QAAQ,CAAC,MAAM,EAAE,MAAM,CAAC;IACxB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,IAAI,EAAE,SAAS,MAAM,EAAE,CAAC;IACjC,QAAQ,CAAC,WAAW,EAAE,MAAM,CAAC;IAC7B,QAAQ,CAAC,gBAAgB,EAAE,MAAM,CAAC;CACnC;AAED,MAAM,WAAW,kBAAkB;IACjC,QAAQ,CAAC,aAAa,EAAE,OAAO,0BAA0B,CAAC;IAC1D,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,cAAc,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,kBAAkB,CAAC;IACnC,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;IAC5B,QAAQ,CAAC,MAAM,CAAC,EAAE,oBAAoB,GAAG,mBAAmB,GAAG,WAAW,GAAG,SAAS,CAAC;IACvF,QAAQ,CAAC,OAAO,CAAC,EAAE,MAAM,GAAG,SAAS,CAAC;IACtC,QAAQ,CAAC,OAAO,EAAE,SAAS,eAAe,EAAE,CAAC;IAC7C,QAAQ,CAAC,KAAK,EAAE,MAAM,CAAC;IACvB,QAAQ,CAAC,IAAI,EAAE,MAAM,CAAC;IACtB,QAAQ,CAAC,SAAS,EAAE,OAAO,CAAC;CAC7B;AA+CD,wBAAgB,0BAA0B,CAAC,KAAK,EAAE,OAAO,GAAG,uBAAuB,CAmBlF"}